CVE-2019-19148

Tellabs Optical Line Terminal (OLT) 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Common Weakness Enumeration
References
https://docs.tellabs.com/articles/#%21vulnerability-response/cve-2019-19148
https://github.com/ellwoodthewood/tellabs_rce
https://docs.tellabs.com/articles/#%21vulnerability-response/cve-2019-19148
https://github.com/ellwoodthewood/tellabs_rce